| Max CVSS | 6.4 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-0193 | 5.0 |
WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a
|
13-02-2023 - 00:36 | 06-05-2014 - 14:55 | |
| CVE-2019-16869 | 5.0 |
Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.
|
30-03-2022 - 14:21 | 26-09-2019 - 16:15 | |
| CVE-2019-20444 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
|
14-09-2021 - 12:45 | 29-01-2020 - 21:15 | |
| CVE-2019-20445 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
|
14-09-2021 - 12:45 | 29-01-2020 - 21:15 | |
| CVE-2020-7238 | 5.0 |
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869
|
27-05-2021 - 16:21 | 27-01-2020 - 17:15 | |
| CVE-2019-20444 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
|
25-09-2020 - 20:15 | 29-01-2020 - 21:15 | |
| CVE-2020-7238 | 5.0 |
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869
|
25-09-2020 - 20:15 | 27-01-2020 - 17:15 | |
| CVE-2019-20445 | 6.4 |
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
|
25-09-2020 - 20:15 | 29-01-2020 - 21:15 | |
| CVE-2019-16869 | 5.0 |
Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.
|
25-09-2020 - 00:15 | 26-09-2019 - 16:15 | |
| CVE-2014-3488 | 5.0 |
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.
|
19-02-2020 - 20:15 | 31-07-2014 - 14:55 |